Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/488b117a-67c0-383b-87bb-5a1ccbc4fb30.roa
File: 488b117a-67c0-383b-87bb-5a1ccbc4fb30.roa (raw, json)
Hash identifier: q40c9rtQZYUVUXW8s1kiGjeHzJtRko53U+s0SeA0R/0=
Subject key identifier: F3:14:5C:F0:1E:FF:B3:79:5B:7F:B3:66:57:A3:C1:43:0C:96:9E:44
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848CE9BDCD7E637CE999C6A7980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/488b117a-67c0-383b-87bb-5a1ccbc4fb30.roa
Signing time: Fri 07 Feb 2025 20:17:27 +0000
ROA not before: Fri 07 Feb 2025 20:17:27 +0000
ROA not after: Thu 08 May 2025 19:17:27 +0000
asID: 215224
IP address blocks: 108.165.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 21:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ce:9b:dc:d7:e6:37:ce:99:9c:6a:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 7 20:17:27 2025 GMT
Not After : May 8 19:17:27 2025 GMT
Subject: CN=1b416d8d-2dc6-4f85-a11c-8b04e230309f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:62:77:f6:50:18:ce:ad:50:3b:1e:52:18:
1d:5b:c3:21:2b:9b:09:44:64:a0:93:b6:66:5d:6f:
67:e9:ed:b2:d2:79:f8:4a:89:04:94:ee:83:fe:9c:
7a:a7:3d:fb:09:cc:ac:97:bd:e9:b8:fd:4b:91:37:
a2:5f:ec:c0:60:8c:53:1b:de:68:18:c7:ae:cf:d8:
60:34:31:d7:97:e5:bb:c3:a9:11:64:c4:57:a1:78:
33:55:e1:4a:db:b9:62:89:ae:da:8a:a6:da:ad:f9:
dc:1b:2a:1f:53:6a:6b:38:8c:4b:1a:26:b2:73:72:
5a:6c:f1:f2:53:1f:37:2c:54:c9:ae:d4:7c:50:01:
81:bb:6d:9a:4f:32:f0:2a:2f:97:a1:31:90:a2:e5:
7a:eb:0f:29:ba:4e:5d:10:b8:95:2d:64:05:8b:6e:
0e:8f:65:51:db:4f:3f:24:07:1f:07:fe:9e:9e:6c:
1c:9d:e3:15:9d:16:bf:31:73:9b:d9:bb:b7:bb:cf:
86:20:e8:be:f1:7d:62:bc:9b:d6:8b:33:21:e8:ec:
24:6c:bf:3f:d2:76:e3:43:8c:59:c6:c0:5a:1d:af:
17:8d:37:20:43:16:db:cd:4d:c7:6d:d0:d1:08:23:
13:d1:0b:5e:79:d9:8f:47:f0:8a:49:65:54:25:25:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:14:5C:F0:1E:FF:B3:79:5B:7F:B3:66:57:A3:C1:43:0C:96:9E:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/488b117a-67c0-383b-87bb-5a1ccbc4fb30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ed:8b:eb:a2:6c:2d:85:b9:2b:62:0e:3a:8d:6e:31:8b:5b:
6b:c7:b9:22:89:dc:16:4b:9a:9a:e6:88:6f:ef:e0:f9:f2:39:
6e:7b:c9:df:de:39:b5:aa:a6:68:ef:c3:4f:f5:30:4d:cb:3c:
85:3b:be:07:75:a9:d4:ec:a1:07:3c:07:70:51:e1:13:5e:0f:
34:68:8f:e6:61:2f:8b:96:90:97:e5:e9:f9:ba:e5:5a:62:14:
02:98:4b:61:74:7a:a3:03:8c:33:ae:23:6f:a5:e9:e9:48:03:
b1:e3:a1:f7:80:3d:5a:c4:fd:45:ad:99:6e:5e:87:a8:12:52:
e5:b0:0a:48:6e:61:6e:29:71:7e:40:79:d4:93:dd:1c:55:11:
e9:4c:16:ba:1f:43:9a:0a:e8:d5:3a:d8:a1:24:58:b2:a3:e2:
05:cf:2c:52:84:1d:b1:8e:dc:cf:db:c8:f4:2b:a3:49:1a:64:
fb:b6:ce:e8:45:b4:6e:54:0c:48:52:a4:19:db:59:22:a3:29:
ef:80:99:88:2a:f7:30:4d:94:d9:64:2e:1b:29:27:54:d8:98:
8b:fd:67:a7:b7:01:b2:1a:61:a9:ef:b4:62:44:05:51:dd:ec:
1b:38:ad:7e:88:7e:8d:34:b6:3c:7c:ca:0b:83:1b:c8:2b:a3:
b2:64:93:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:34:37 2025 by rpki-client